Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
File:                     VrS_zQFkrXxmiK8iJGyC4Zld01E.mft (raw, json)
Hash identifier:          nRTP96VYIv3YBYHym8doBtO9bNXsJNdFYhjgZjZhRuo=
Subject key identifier:   D4:92:C0:E2:75:C0:9C:41:D9:94:98:51:E6:E2:35:89:EC:ED:11:98
Authority key identifier: 56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51
Certificate issuer:       /CN=56b4bfcd0164ad7c6688af22246c82e1995dd351
Certificate serial:       01A08AC31CA76D107A38AC39A45C155E24E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
Manifest number:          1A46
Signing time:             Thu 10 Sep 2026 10:00:37 +0000
Manifest this update:     Thu 10 Sep 2026 10:00:37 +0000
Manifest next update:     Fri 11 Sep 2026 10:00:37 +0000
Files and hashes:         1: H72aDLmziajxH7j-buUE4Es0RIo.roa (hash: hI4MdmQURw2gDSqP3qZ28v2HkIRtU1OHtdMVA31r6DE=)
                          2: VrS_zQFkrXxmiK8iJGyC4Zld01E.crl (hash: UgAS7f5RmE1iQJWYy5eY7GzNhymEe3f/rcGqV1cY9/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 10:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:c3:1c:a7:6d:10:7a:38:ac:39:a4:5c:15:5e:24:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b4bfcd0164ad7c6688af22246c82e1995dd351
        Validity
            Not Before: Sep 10 10:00:37 2026 GMT
            Not After : Sep 11 10:00:37 2026 GMT
        Subject: CN=d492c0e275c09c41d9949851e6e23589eced1198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d7:cc:ff:f7:e7:be:b4:80:16:48:22:63:28:
                    3a:09:7c:70:b7:e7:ac:36:fa:3b:70:a5:58:d4:3e:
                    18:fe:1e:8b:13:d2:c8:09:91:1e:5c:ac:e8:a9:1c:
                    32:8f:85:32:89:56:d9:59:ec:48:4f:2e:de:01:b4:
                    15:2f:1a:d3:05:34:e5:c1:c5:76:23:cd:de:4f:d5:
                    0a:65:be:4a:c2:5f:79:b4:50:57:d2:44:a2:c8:94:
                    ed:55:42:6a:b5:9e:6d:4c:a5:58:55:7b:15:69:f6:
                    d7:26:5b:62:19:4e:60:d3:a9:dc:c8:48:4f:6a:f8:
                    03:fd:5d:a4:1a:14:0d:92:f8:4d:3d:84:6e:dc:4e:
                    64:88:72:ef:35:72:99:1d:11:fa:72:4d:93:2c:b8:
                    61:18:d5:c9:ba:e1:9d:a4:b9:eb:91:f5:a5:c7:a4:
                    06:e7:28:0c:a2:2f:99:30:51:0f:ff:d9:fc:e6:be:
                    b5:41:be:33:90:92:c3:c2:c9:19:67:da:14:6d:97:
                    cd:66:93:b4:ee:38:ca:9e:53:51:ea:49:15:3c:fd:
                    09:43:94:f6:2b:ad:e0:eb:23:8a:91:ed:11:3f:50:
                    84:2e:dd:dd:b0:86:62:b1:e2:1d:00:af:95:a9:d0:
                    3c:b5:ec:2a:27:f6:af:57:7c:23:ba:5b:8a:d2:96:
                    bd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:92:C0:E2:75:C0:9C:41:D9:94:98:51:E6:E2:35:89:EC:ED:11:98
            X509v3 Authority Key Identifier:
                keyid:56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:4b:7d:3e:9c:b2:1f:f3:a0:b6:d8:bf:aa:ac:2f:b5:0d:53:
         b0:b1:b4:69:9c:e2:f2:82:e7:63:1a:af:dd:c3:0c:4b:fa:9f:
         53:48:9e:99:5d:ac:3e:3e:ab:31:6a:56:17:79:8c:66:86:e1:
         28:dc:20:32:07:48:1b:d2:24:ef:90:0b:c5:24:f2:19:2f:36:
         84:11:9f:2b:57:13:26:fb:71:e9:a5:aa:05:aa:6b:6f:a4:79:
         e2:58:b9:41:1e:0b:cc:4a:52:2e:98:20:8b:19:02:56:38:a2:
         aa:0f:64:89:56:02:68:9a:ba:74:0d:9f:00:cb:13:c4:53:a7:
         be:ca:d6:e1:70:3c:8e:c8:73:91:26:09:36:f8:f9:f1:56:cc:
         7c:ab:51:9b:9f:a4:c2:2d:f1:46:da:82:bd:37:0e:fc:09:41:
         cb:20:b9:22:8c:8c:51:9a:41:f1:0b:4a:b8:ba:27:bd:35:d6:
         cb:6f:e5:f2:56:e8:97:c9:02:a2:30:ca:34:f6:e3:19:89:72:
         e3:46:eb:19:60:72:91:3c:2b:a4:54:63:d1:4f:3d:2c:7e:d6:
         12:6c:6c:08:58:37:0b:a6:14:d8:9b:4c:9d:74:b9:b6:8c:b2:
         2a:f7:e5:bf:0f:56:53:90:c1:ae:d3:b5:e2:01:10:dc:05:c2:
         2f:99:35:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:32:58 2026 by rpki-client